Stop the Microsoft login

If you support users who are not joined to a domain (standalone machines), one of the most frustrating things to manage is people signing into the computer with their personal Microsoft accounts.
This creates support headaches, profile confusion, and unnecessary risk. I’ve dealt with this both professionally and in my own personal life (you know who you are lol). Let’s stop it at the source:

Here’s a simple way to block adding new Microsoft accounts to a Windows machine:
- Go to your start menu and open "Registry Editor" as admin
- Go to this path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- Either create or open a DWORD called "NoConnectedUser" and set it to 1

Now users will no longer be able to connect new Microsoft accounts to the device.

Important: This does NOT block signing into Microsoft apps or websites. It only prevents linking Microsoft accounts at the OS level.

This is especially useful for:
- Standalone business PCs
- Shared home systems
- Lab environments
- Devices you want fully locally controlled

Less account sprawl. Less confusion. More control.

(if you want a free guide of other hardening tips like this or a better method of hardening configuration settings email me at hardeningtips@senteon.co 😉 )